VULNERABILITY INTELLIGENCE

CVE-2007-3740

CVSS score4.4 MEDIUM
EPSS probability0.38%
CISA KEVNot currently listed
Published2007-09-14
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:P/A:P

Description

The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges.

Primary references